tocsin

CVE-2026-63199

2 advisories.

Go/github.com/perses/perses CVE-2026-63199: high

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure

Action: Upgrade github.com/perses/perses to 0.54.0-rc.0 or later.

go get github.com/perses/perses@v0.54.0-rc.0

Affected

introducedfixedlast affected
0.43.00.54.0-rc.0-

Fixed versions

0.54.0-rc.0

Sources

CVE-2026-63199 · published · modified · JSON

Go/github.com/perses/perses CVE-2026-63199: unknown

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses

Action: Upgrade github.com/perses/perses to 0.54.0-rc.0 or later.

go get github.com/perses/perses@v0.54.0-rc.0

Affected

introducedfixedlast affected
0.43.00.54.0-rc.0-

Fixed versions

0.54.0-rc.0

Sources

CVE-2026-63199 · published · modified · JSON